Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
File:                     twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json)
Hash identifier:          6hoZkMCtRf5phSbPVB28XwrWg5LyuJo3iINBLTf2xxI=
Subject key identifier:   A3:AF:E7:F5:C2:D0:B4:0C:AC:64:6C:47:59:CF:7B:38:96:7C:70:59
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Certificate issuer:       /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial:       0A08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
Manifest number:          09DE
Signing time:             Wed 18 Jun 2025 19:48:58 +0000
Manifest this update:     Wed 18 Jun 2025 19:48:57 +0000
Manifest next update:     Wed 25 Jun 2025 19:48:57 +0000
Files and hashes:         1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: nBSNUZ/BYnKThnaTuzLKSRhXg9Rz8AtEAoccG/eycm4=)
                          2: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 0mOETl/OdBfCNtX5dYvxJWUGYIrmCCO9qdnaVBCdeGw=)
                          3: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: lfBwwOjjkJPzorGSrjFmgyYNK8ta/zHBe8Kj7Bzu0ac=)
                          4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: /SND4cbujhT7TqEgt/0aWxeQoWtrbzsjgSVcPJIkIEo=)
                          5: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: 6v3m90vLYNtp4AY7tUO3B6KEXg7uMMxAcXi3ddcOJ74=)
                          6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: Y4DJ8WF2RUGHabm+AWJoTCeaPDdvIhxKo59oQbeVOD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 19:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568 (0xa08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
        Validity
            Not Before: Jun 18 19:48:57 2025 GMT
            Not After : Jun 25 19:48:57 2025 GMT
        Subject: CN=6853182a-29a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:18:bd:c0:73:1a:48:5a:74:9c:ba:83:04:
                    4a:00:41:10:d7:cc:6f:5f:19:b8:49:d8:06:cd:2e:
                    a3:94:0c:14:2b:ad:8a:6d:53:03:85:7f:ef:9e:47:
                    d0:d8:97:f9:f0:49:5d:47:fd:6f:46:ce:fe:2a:3b:
                    66:d2:46:b2:5b:28:6b:dd:af:ce:45:b6:dc:26:20:
                    17:a8:ca:81:a5:45:fe:5d:31:f4:60:e8:37:eb:7c:
                    f6:47:57:01:d0:98:c1:ac:72:40:75:dc:e9:e0:f7:
                    9d:5d:cb:05:95:1d:e0:b1:ed:58:98:e2:2c:dc:38:
                    08:d5:7a:6a:dc:26:88:5d:20:a7:89:74:f7:f8:bc:
                    c2:e2:98:07:37:af:e5:f6:f6:bb:4d:02:6d:f4:ee:
                    f8:6f:ba:fc:16:0c:21:cf:70:6e:70:a5:24:66:3f:
                    1e:aa:f5:c7:28:e7:f6:dd:86:97:a3:19:76:4f:02:
                    89:f2:2d:44:3b:e9:16:3d:7a:58:2d:ea:9e:5a:d4:
                    f6:db:f5:24:ea:7e:d9:7a:97:d4:6d:0b:96:1a:da:
                    2f:d2:e6:9f:e3:fe:c4:f2:2f:cf:ff:48:08:33:f5:
                    fc:8a:1c:9a:5b:e4:69:60:1e:db:e7:e7:7c:df:99:
                    92:78:64:f5:05:ec:1f:58:52:1d:50:64:da:32:88:
                    cf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AF:E7:F5:C2:D0:B4:0C:AC:64:6C:47:59:CF:7B:38:96:7C:70:59
            X509v3 Authority Key Identifier:
                keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:19:e2:ba:d8:d2:12:73:0a:d4:3f:f9:cd:db:9d:da:50:
         1a:6b:ee:31:4d:54:33:2f:1e:62:65:ec:b2:de:c7:65:ef:47:
         db:27:b6:5f:86:01:61:88:98:3a:50:d4:2b:81:c2:6f:22:65:
         18:9d:05:cc:62:ad:a1:33:9c:21:09:df:41:60:9e:1a:ea:83:
         85:63:92:b3:a3:b0:ec:5e:b1:e3:d1:6d:02:dd:87:1b:40:4f:
         73:85:6a:8b:dd:cb:a7:89:0f:80:72:13:f6:6a:53:6a:c8:5c:
         03:8e:fc:8a:e1:7f:d1:4b:b2:e2:ae:b4:bf:70:f4:2e:e0:63:
         80:e9:5c:ec:08:81:7b:2b:ac:90:4c:36:33:c6:ad:90:be:8e:
         e4:2c:ed:d8:15:03:d1:32:18:fe:e9:cd:7c:41:45:0f:dd:28:
         07:56:c7:f2:1c:d8:60:2d:c1:8c:17:db:53:6e:5d:05:43:42:
         67:a8:27:2c:51:81:df:9d:11:25:dc:06:d6:63:09:87:da:7f:
         aa:09:d8:4d:ab:bf:f7:e1:b0:ff:87:d7:8e:ef:79:4a:a3:48:
         fc:8c:09:af:ed:b9:f0:e0:a0:32:f4:2c:87:fd:9c:ab:d9:77:
         c3:7d:d0:b5:c6:27:0c:25:fe:81:d1:8d:9e:bc:81:1b:a0:18:
         5f:02:ec:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:16:52 2025 by rpki-client